Privacy Policy

Cherrypicker Inc. (“Cherrypicker,” “Company,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you access or use our websites, applications, recruiting platform, candidate-facing applications and portals, hiring manager applications and dashboards, AI-assisted sourcing tools, outreach workflows, recruiting services, Cherrypicker Labs, custom AI and software development, automation, integrations, consulting, professional services, communications, and related products or services that link to this Privacy Policy (collectively, the “Services”).

This Privacy Policy applies to information we collect from and about:

• Business customers and hiring teams;
• Candidates and potential candidates;
• Website visitors;
• Users of our platform, mobile app, or candidate portal;
• Individuals who communicate with us;
• Individuals who receive recruiting outreach from Cherrypicker;
• Individuals whose professional information is submitted to or processed through Cherrypicker; and
• Other users of our Services.

By using the Services, submitting information to Cherrypicker, responding to our outreach, creating an account, activating a candidate profile, or otherwise interacting with us, you acknowledge that you have read this Privacy Policy.

If you do not agree with this Privacy Policy, you should not use the Services.

1. What Cherrypicker Does

Cherrypicker Inc. is a Delaware corporation that operates two primary service lines.

Cherrypicker Recruiting. Cherrypicker is an outbound recruiting engine for in-house hiring teams. This service line helps companies identify, engage, match with, and connect with potential candidates. It may include AI-assisted and human-assisted candidate sourcing, candidate enrichment, use of publicly available professional data and third-party data providers, recruiting campaigns, email, LinkedIn, and SMS outreach, candidate interest collection, candidate profiles, a private talent network, candidate screening, interview screening, interview transcripts, screening summaries, candidate and job fit analysis, AI-generated scores or recommendations, recruiting workflow automation, applicant and candidate communication, hiring-team dashboards, candidate-facing portals or applications, integrations with third-party software, and done-for-you recruiting services.

Cherrypicker helps generate and organize candidate interest. Cherrypicker does not make final employment decisions. Customers remain responsible for hiring, compensation, interview, promotion, termination, eligibility, and other employment decisions.

Cherrypicker Labs. Cherrypicker Labs is Cherrypicker Inc.’s AI product development, automation, consulting, and technical implementation service line. It is a service line of Cherrypicker Inc., not a separate legal entity. Labs may provide custom software development, custom AI products, AI agents, internal business tools, workflow automation, systems and API integrations, Model Context Protocol (MCP) integrations, recruiting and marketing automation, outbound marketing and cold email infrastructure, domain and inbox configuration, data enrichment workflows, CRM and ATS integrations, product strategy, AI vendor selection, technical implementation, AI consulting, data workflows, custom dashboards, custom internal applications, and related professional services. Labs may work with customers in industries outside of recruiting.

Cherrypicker is not a background check company, consumer reporting agency, employer of record, or staffing agency unless otherwise expressly stated in a separate written agreement.

2. Information We Collect

We collect information in several ways, including information you provide directly, information collected automatically, information submitted by business customers, information obtained from third-party providers, and information from publicly available professional sources.

2.1 Information You Provide Directly

We may collect information you provide when you:

• Create an account;
• Complete a candidate profile;
• Submit a job description;
• Upload candidate information or profile URLs;
• Request candidate sourcing or outreach;
• Purchase credits or services;
• Communicate with Cherrypicker;
• Respond to recruiting outreach;
• Participate in screening or interviews;
• Submit forms on our website;
• Subscribe to emails or content;
• Join a waitlist;
• Request support;
• Participate in surveys, calls, demos, podcasts, webinars, or events;
• Send us feedback; or
• Otherwise interact with the Services.

This information may include:

• Name;
• Email address;
• Phone number;
• Company name;
• Job title;
• Location;
• Billing information;
• Account login information;
• Communications with us;
• Job descriptions;
• Hiring criteria;
• Candidate notes;
• Candidate preferences;
• Resume, LinkedIn URL, or professional profile information;
• Work history;
• Education history;
• Skills;
• Certifications;
• Compensation expectations;
• Job search preferences;
• Work authorization information, where provided;
• Screening responses;
• Interview availability;
• Calendar information, where integrated;
• Files, documents, or materials you submit; and
• Any other information you choose to provide.

2.2 Candidate Information

If you are a candidate or potential candidate, we may collect information about you from:

• You directly;
• Business customers;
• Hiring managers;
• Publicly available professional sources;
• Profile URLs submitted to Cherrypicker;
• LinkedIn or other professional profile pages, where available;
• Third-party data providers;
• Contact enrichment providers;
• Recruiting campaigns;
• Communications with you;
• Screening workflows;
• Job matching workflows;
• Cherrypicker recruiters or representatives; and
• Other sources permitted by law.

Candidate information may include:

• Name;
• Email address;
• Phone number;
• Location;
• Current and past employers;
• Current and past job titles;
• Employment history;
• Education history;
• Skills;
• Certifications;
• Professional profile URLs;
• Resume information, if provided;
• Job preferences;
• Compensation preferences;
• Work location preferences;
• Remote, hybrid, or onsite preferences;
• Work authorization information, if provided;
• Communications with Cherrypicker;
• Responses to outreach;
• Invite code activity;
• Profile activation status;
• Candidate interest or decline signals;
• Screening responses;
• Interview availability;
• Notes or summaries created during recruiting workflows; and
• Other information relevant to recruiting, job matching, or candidate engagement.

We use candidate information to operate Cherrypicker’s recruiting workflows, create and update profiles, match candidates with relevant opportunities, conduct outreach, facilitate introductions, support screening, prevent misuse, honor opt-outs, and improve the Services.

2.3 Business Customer Information

If you are a business customer, hiring manager, recruiter, company representative, or authorized user, we may collect:

• Name;
• Work email;
• Phone number;
• Company name;
• Job title;
• Department;
• Billing details;
• Subscription details;
• Credit usage;
• Login activity;
• Hiring preferences;
• Job descriptions;
• Search criteria;
• Candidate selections;
• Candidate unlocks;
• Communication history;
• Support requests;
• Platform usage data;
• Feedback;
• Calendar or scheduling data, where integrated;
• Payment status;
• Contract or order form details; and
• Other business information needed to provide the Services.

2.4 Information Submitted by Customers

Business customers may submit information to Cherrypicker, including:

• Job descriptions;
• Hiring criteria;
• Candidate profile URLs;
• LinkedIn URLs;
• Candidate names;
• Candidate professional information;
• Contact lists;
• Search criteria;
• Notes;
• Outreach instructions;
• Screening requirements;
• Interview requirements; and
• Other recruiting-related information.

If you submit personal information about another person to Cherrypicker, you are responsible for ensuring that you have the right to do so and that your submission complies with applicable law.

2.5 Cherrypicker Labs Project Information

Depending on the services requested, a Cherrypicker Labs engagement may require us to access or process information belonging to or provided by the customer. We collect only what a given project actually requires, and the categories below will not all apply to every engagement.

Depending on the services requested, this may include:

• Customer business information;
• Project requirements;
• Product specifications;
• Technical documentation;
• Customer-provided datasets;
• Test data;
• CRM data;
• ATS data;
• Business-system information;
• Workflow data;
• Integration data;
• API information;
• Source code;
• Code repositories;
• Configuration information;
• Authentication credentials or tokens that customers voluntarily provide so that we can build, connect, or operate a system on their behalf;
• Technical logs;
• Debugging information;
• Infrastructure information;
• Domain configuration;
• Inbox configuration;
• Marketing campaign configuration;
• Customer communications; and
• Other information reasonably required to perform the project.

Customer-provided datasets, CRM records, ATS records, contact lists, and similar materials may themselves contain personal information about the customer’s employees, candidates, customers, leads, or other individuals.

Customers are responsible for ensuring that they have the right and authority to provide Cherrypicker with the data, systems, accounts, repositories, and credentials they give us access to, and for ensuring that our processing of that information for the project is permitted under applicable law and under the customer’s own agreements and privacy commitments.

Where a customer provides credentials, tokens, or system access, we use them only to perform the requested work, and we ask that customers issue scoped or revocable access where their systems support it.

2.6 Information from Third-Party Data Providers and Public Sources

Cherrypicker may collect professional and business information from third-party data providers, enrichment providers, public sources, APIs, databases, professional profiles, company websites, job postings, and other sources permitted by law.

This information may be used to:

• Identify potential candidates;
• Enrich candidate profiles;
• Find or verify contact information;
• Update professional history;
• Support sourcing and search workflows;
• Generate or refine candidate matches;
• Run outbound recruiting campaigns;
• Prevent duplicate records;
• Improve data quality; and
• Provide the Services.

Third-party data may be inaccurate, outdated, incomplete, or unavailable. Cherrypicker may use commercially reasonable efforts to improve data quality, but we do not guarantee that third-party data is always accurate or complete.

2.7 Information Collected Automatically

When you use our website, platform, app, emails, or other Services, we may automatically collect certain information, including:

• IP address;
• Device type;
• Browser type;
• Operating system;
• Referring pages;
• Pages viewed;
• Links clicked;
• Session activity;
• Login activity;
• Approximate location based on IP address;
• Date and time of access;
• Cookie identifiers;
• Email engagement data;
• Error logs;
• System activity;
• Feature usage;
• Search activity;
• Credit usage;
• Candidate actions;
• Platform interaction data; and
• Other usage and analytics information.

We may use cookies, pixels, web beacons, local storage, analytics tools, logging tools, and similar technologies to collect this information.

2.8 Communications, Calls, and Recordings

If you communicate with Cherrypicker by email, chat, phone, video call, SMS, social media, or other channels, we may collect and store those communications.

If we record a call, demo, interview, screening, podcast, webinar, or other session, we will do so where permitted by law and may provide notice or obtain consent where required. Recording and transcription of candidate screenings and interviews is described in more detail in the “Interview and Candidate Screening Technology” section below.

3. How We Use Information

We may use personal information to:

• Provide, operate, maintain, and improve the Services;
• Create and manage accounts;
• Create, enrich, update, and maintain candidate profiles;
• Identify potential candidates;
• Conduct candidate sourcing;
• Generate candidate matches;
• Analyze job descriptions;
• Rank, sort, summarize, or organize candidate results;
• Conduct outbound recruiting outreach;
• Send invite codes;
• Facilitate candidate introductions;
• Support candidate screening workflows;
• Communicate with candidates and customers;
• Process payments;
• Manage credits, subscriptions, and billing;
• Provide customer support;
• Respond to inquiries;
• Schedule calls, demos, interviews, or meetings;
• Personalize the user experience;
• Improve search, matching, and recommendation workflows;
• Prevent duplicate records;
• Detect fraud, misuse, abuse, or unauthorized access;
• Protect candidate privacy controls;
• Honor opt-outs, suppression requests, and unsubscribe requests;
• Enforce our Terms of Use;
• Comply with legal obligations;
• Maintain security;
• Debug and troubleshoot the Services;
• Analyze usage and performance;
• Develop new products and features;
• Send administrative, transactional, service, and security communications;
• Send marketing communications where permitted;
• Conduct research and analytics;
• Support business operations; and
• Carry out other purposes described when information is collected.

For Cherrypicker Labs engagements, we also use information to scope, design, build, test, deploy, integrate, support, debug, secure, and document the products, automations, integrations, and systems a customer has asked us to deliver, and to communicate with the customer about the project.

The FTC recommends that businesses understand what personal information they collect, why they collect it, how long they keep it, and how they protect it. It also recommends keeping sensitive data only as long as there is a business or legal need to retain it.

4. AI, Automation, and Recruiting Workflows

Cherrypicker may use artificial intelligence, machine learning, automation, algorithms, large language models, analytics tools, and other automated technologies to support the Services.

These tools may assist with:

• Job description analysis;
• Candidate sourcing;
• Search query generation;
• Candidate matching;
• Search result ranking;
• Profile enrichment;
• Profile summarization;
• Skills extraction;
• Candidate-job fit analysis;
• Outreach workflow support;
• Screening support;
• Interview or screening summaries;
• Duplicate detection;
• Candidate recommendations;
• Quality control; and
• Service improvement.

Cherrypicker does not make final hiring decisions, compensation decisions, employment eligibility decisions, promotion decisions, termination decisions, or other employment decisions on behalf of customers.

Cherrypicker does not intend AI-assisted outputs, screening results, scores, summaries, rankings, or recommendations to serve as the sole basis for an employment decision. They are decision-support outputs meant to help a human reviewer organize, prioritize, and understand candidate information.

Hiring customers are responsible for independently reviewing candidates and for reviewing candidate information, AI-assisted outputs, screening results, and recommendations before making employment-related decisions. Customers remain responsible for their employment decisions and for their compliance with employment, anti-discrimination, and automated decision-making laws that apply to them.

Cherrypicker does not guarantee the accuracy, completeness, or consistency of AI-generated screening outputs. AI outputs can be wrong, out of date, or incomplete, and they should be treated as one input among several.

Cherrypicker uses a hybrid approach that combines human sourcing with AI-assisted tools, and certain AI sourcing features are currently in beta. Cherrypicker’s candidate matching is based on criteria such as skills, years of experience, location radius, and stated preferences. Final hiring decisions are made by customers and not on the Cherrypicker platform.

AI-assisted tools used in employment contexts can create compliance risk, including potential discrimination risk, and the EEOC has stated that employers remain responsible for complying with federal employment discrimination laws when using AI or other technology in employment decisions.

5. Interview and Candidate Screening Technology

Cherrypicker may use third-party technology providers to facilitate candidate screenings, interviews, assessments, and related recruiting workflows. We may change, add, or replace these providers over time.

Depending on the screening method used and the functionality enabled for a given role or customer, these systems may process:

• Candidate responses;
• Written responses;
• Audio, where applicable;
• Video, where applicable;
• Recordings, where enabled;
• Transcripts, where enabled;
• Interview metadata;
• Timestamps;
• Screening questions;
• Screening responses;
• Summaries;
• Notes;
• Candidate and job fit analysis;
• Scores;
• Recommendations; and
• Other screening-related information.

Not every screening involves every category above. Some screenings are text-based only. Whether a screening is recorded or transcribed depends on the screening method used, the functionality enabled, and applicable law.

Where we record or transcribe a screening or interview, we do so where permitted by law, and we provide notice or obtain consent where required.

These third-party providers may process screening information on behalf of Cherrypicker, on behalf of the applicable hiring customer, or both, depending on the arrangement and the workflow used.

Screening information may be shared with the hiring customer associated with the role, as described in this Privacy Policy.

As described in the preceding section, screening outputs, summaries, scores, and recommendations are intended to support human review and are not intended to serve as the sole basis for an employment decision.

6. Accommodations and Alternative Screening Methods

Where required by applicable law, candidates may request a reasonable accommodation or an alternative screening method in connection with a Cherrypicker screening or interview workflow.

Candidates may contact Cherrypicker at privacy@getcherrypicker.com or support@getcherrypicker.com, and may also contact the applicable hiring company directly.

Because accommodation obligations generally rest with the employer, we will work with the applicable hiring customer on requests that relate to their role or their hiring process, and we will pass along requests we receive where appropriate.

We will accommodate requests where required by applicable law. Where the law does not require a particular accommodation or alternative method, we cannot promise that one will be available in every circumstance, and availability may depend on the hiring customer and the workflow involved.

7. No Background Checks; No Consumer Reports

Cherrypicker does not provide background checks, credit checks, criminal history checks, reference checks, employment eligibility checks, or consumer reports.

Cherrypicker is not a consumer reporting agency as defined by the Fair Credit Reporting Act.

The Services are not intended to be used as the sole basis for hiring, retention, promotion, reassignment, compensation, termination, or other employment-related decisions.

The FTC explains that employment background checks can be consumer reports under the Fair Credit Reporting Act, and employers using consumer reports for hiring, retention, promotion, or reassignment must comply with FCRA obligations.

Customers are solely responsible for any background checks, reference checks, employment eligibility verification, credential verification, or other due diligence required by their hiring process or applicable law.

8. How We Share Information

We may share personal information as described below.

8.1 With Business Customers

We may share candidate information with business customers when necessary to provide the Services, including to:

• Present candidate search results;
• Display redacted or partially redacted candidate profiles;
• Facilitate candidate introductions;
• Share candidate interest signals;
• Share candidate-provided profile information;
• Share screening responses or summaries;
• Support job matching;
• Support customer-requested recruiting campaigns;
• Facilitate communication between candidates and customers; and
• Provide hiring manager dashboards or reports.

Candidate profile visibility may depend on the applicable workflow. For example, certain candidate information may be redacted until the candidate expresses interest, activates a profile, accepts an introduction, responds positively to outreach, or otherwise consents to additional visibility.

8.2 With Candidates

We may share information about business customers, hiring companies, job opportunities, job descriptions, hiring teams, compensation details, interview processes, or other relevant opportunity information with candidates.

8.3 With Service Providers

We may share information with vendors, contractors, processors, and service providers who help us operate the Services, including providers of:

• Cloud hosting and infrastructure;
• Data storage;
• Security;
• Analytics;
• Payment processing;
• Customer support;
• Email delivery and email infrastructure;
• SMS delivery;
• LinkedIn or social outreach workflows;
• Calendar and scheduling tools;
• CRM systems;
• Applicant tracking or HR integrations;
• Data enrichment;
• Contact verification;
• AI model providers and machine learning tools;
• Interview and candidate screening providers;
• Development partners, engineering partners, and contractors;
• Integration providers;
• Software vendors;
• Error monitoring;
• Workflow automation;
• Document management;
• Communication tools; and
• Other business operations.

These service providers may access personal information only as needed to provide services to Cherrypicker or as otherwise permitted by law.

We engage service providers under terms that require them to protect the information they process for us and to use it only for the purposes we authorize or as otherwise permitted by law.

8.4 With Third-Party Data and Enrichment Providers

We may share limited information with third-party data providers or enrichment providers to identify, enrich, verify, update, or improve candidate or business information.

For example, we may use a candidate’s name, employer, professional profile URL, email address, or other professional information to request additional professional or contact information from an enrichment provider.

8.5 With Integrations Selected by Customers

If a customer connects Cherrypicker to a third-party system, such as an ATS, CRM, calendar, email platform, or workflow automation tool, we may share information with that integration as directed by the customer.

Customers are responsible for their use of third-party integrations and for ensuring that connected systems are configured and used lawfully.

8.6 For Legal, Safety, and Compliance Purposes

We may disclose information if we believe disclosure is reasonably necessary to:

• Comply with law, regulation, subpoena, court order, or legal process;
• Respond to lawful requests from public authorities;
• Enforce our Terms of Use;
• Protect Cherrypicker’s rights, property, safety, or security;
• Protect users, candidates, customers, or the public;
• Investigate fraud, misuse, abuse, security incidents, or illegal activity;
• Prevent spam, harassment, or unauthorized access;
• Defend against legal claims; or
• Comply with regulatory or contractual obligations.

8.7 In Business Transfers

We may disclose or transfer information in connection with a merger, acquisition, financing, investment, corporate reorganization, sale of assets, bankruptcy, due diligence process, or similar business transaction.

8.8 With Your Direction or Consent

We may share information when you direct us to do so, consent to the sharing, or otherwise authorize the sharing through your use of the Services.

9. Technology Providers and Subprocessors

Cherrypicker builds and operates the Services using third-party technology. Depending on the Services used, we may rely on:

• AI model providers;
• Cloud infrastructure providers;
• Software vendors;
• Development partners and engineering partners;
• Contractors;
• Integration providers;
• Email infrastructure providers;
• SMS providers;
• Data enrichment providers;
• Analytics providers;
• Security providers;
• Interview and candidate screening providers;
• Subprocessors engaged by any of the above; and
• Other technology providers.

Our technology stack changes over time. We may add, replace, or discontinue providers as our products and requirements evolve, and this Privacy Policy is intended to describe the categories of providers we use rather than to name individual vendors.

For Cherrypicker Labs engagements, we may use employees, contractors, development partners, AI providers, cloud providers, and other technology providers to perform the work. Where a project agreement, statement of work, or data processing agreement sets specific requirements for subprocessors, those requirements apply to that engagement.

Customers with specific subprocessor questions may contact us at privacy@getcherrypicker.com.

10. Candidate Controls and Choices

Candidates may have the ability to:

• Create or activate a profile;
• Update profile information;
• Correct inaccurate information;
• Express interest in opportunities;
• Decline opportunities;
• Block specific companies, where available;
• Opt out of outreach;
• Unsubscribe from email communications;
• Stop SMS communications, where applicable;
• Request deletion of their profile;
• Request access to personal information, where applicable;
• Request correction of personal information;
• Request deletion of personal information, where applicable;
• Withdraw consent where processing is based on consent, where applicable;
• Object to certain processing, where applicable;
• Request that Cherrypicker limit or stop certain processing, where required by law;
• Exercise other privacy rights required by applicable law; and
• Contact Cherrypicker with privacy questions or requests.

Which of these are legal rights rather than product features depends on where you live and which privacy laws apply to you. We make the controls above available broadly where we reasonably can, and we honor legally required rights as described in the “Your Privacy Rights” section below.

Some requests may be subject to legal, security, fraud-prevention, recordkeeping, or operational limitations. For example, we may retain limited information necessary to honor opt-outs, prevent future outreach, comply with legal obligations, resolve disputes, or enforce agreements.

11. Email, SMS, LinkedIn, and Recruiting Outreach

Cherrypicker may contact candidates, potential candidates, customers, prospects, and other users by email, LinkedIn, SMS, phone, in-app message, push notification, chat, or other channels.

We may send:

• Candidate invitations;
• Invite codes;
• Job opportunity messages;
• Recruiting outreach;
• Screening requests;
• Interview scheduling messages;
• Candidate profile activation messages;
• Customer account messages;
• Product updates;
• Service notifications;
• Billing notices;
• Security alerts;
• Support messages;
• Marketing messages; and
• Other communications related to the Services.

SMS or text messages are sent only to individuals who have opted in to receive them. Candidates must opt in before receiving SMS notifications, and you may opt out at any time by replying STOP to any text message. Message and data rates may apply.

You may opt out of marketing emails by using the unsubscribe link where provided. Candidates may opt out of recruiting outreach by using the unsubscribe link, replying with an opt-out request where available, or contacting us.

If you opt out, we may retain limited information, such as your email address or phone number, to maintain a suppression list and prevent future outreach.

Transactional, administrative, legal, security, and service-related communications may continue where necessary.

12. Cookies and Tracking Technologies

We may use cookies, pixels, web beacons, SDKs, local storage, log files, and similar technologies to collect information about your use of the Services.

We may use these technologies to:

• Keep you logged in;
• Remember preferences;
• Secure accounts;
• Analyze website and platform usage;
• Improve performance;
• Measure email engagement;
• Understand marketing effectiveness;
• Debug issues;
• Prevent fraud;
• Improve user experience; and
• Support advertising or retargeting where applicable.

You may be able to control cookies through your browser settings. If you disable cookies, some Services may not work properly.

13. Analytics and Advertising

We may use analytics tools to understand how users interact with our website, platform, emails, content, and Services.

We may also use advertising or retargeting tools to promote Cherrypicker to business prospects or website visitors. These tools may collect information about your device, browser, visits, clicks, and interactions.

Where required by law, we will provide applicable choices regarding cookies, tracking, targeted advertising, sale, or sharing of personal information.

14. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, maintain security, honor opt-outs, prevent fraud, and support legitimate business purposes.

Retention periods may vary depending on the type of information, the context in which it was collected, the user relationship, legal requirements, contractual requirements, security needs, and operational needs.

For example, we may retain:

• Account information while an account is active;
• Candidate profile information while the candidate profile is active or as needed for recruiting workflows;
• Recruiting records and campaign records for as long as needed to operate, support, and account for the recruiting services;
• Screening records, transcripts, summaries, and related outputs for as long as needed to provide the Services to the applicable hiring customer, and as required for legal, security, or dispute-resolution purposes;
• Customer records during the customer relationship;
• Cherrypicker Labs project files, deliverables, customer-provided project information, and related work product for as long as needed to perform, support, and document the engagement, or as required by the applicable project agreement;
• Technical logs, debugging information, and system records for as long as needed for operations, troubleshooting, and security;
• Billing records as required for accounting, tax, and legal compliance;
• Legal records as needed to establish, exercise, or defend legal claims;
• Outreach suppression records to honor opt-outs;
• Security logs for fraud prevention and system protection;
• Communications as needed for support, compliance, or dispute resolution; and
• Deidentified or aggregated information for analytics and product improvement.

Where a signed agreement, statement of work, or data processing agreement sets specific retention or deletion requirements for an engagement, those requirements apply to the information covered by that agreement.

Credentials, tokens, and access provided for a Labs engagement are retained only as long as needed for the work, and we ask customers to revoke or rotate access once an engagement ends.

When information is no longer needed, we may delete, deidentify, aggregate, or securely retain it as permitted by law.

15. Data Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, disclosure, alteration, and destruction.

These safeguards may include access controls, authentication, encryption where appropriate, logging, monitoring, vendor controls, and internal policies.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

You are responsible for protecting your account credentials and notifying us promptly if you believe your account or information has been compromised.

16. International Data Transfers

Cherrypicker is based in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries where Cherrypicker or its service providers operate.

These countries may have data protection laws that differ from those in your location.

Where required by law, we will use appropriate safeguards for international transfers.

17. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to:

• Access personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of personal information;
• Request portability of personal information;
• Object to certain processing;
• Restrict certain processing;
• Withdraw consent where processing is based on consent;
• Opt out of marketing communications;
• Opt out of certain targeted advertising, sale, or sharing;
• Limit certain uses of sensitive personal information; and
• Appeal a privacy rights decision, where required by law.

To exercise privacy rights, contact us at privacy@getcherrypicker.com or support@getcherrypicker.com.

We may need to verify your identity before responding to certain requests. We may decline requests where permitted by law, including where retention is required for legal, security, fraud-prevention, contractual, or operational reasons.

Not every right listed above is available in every jurisdiction. We honor the rights that apply to you under the law of your jurisdiction, and we will tell you if a request falls outside what applies.

Where we process personal information on behalf of a customer, including candidate information a customer submits to us and information we process during a Cherrypicker Labs engagement, we will refer the request to that customer or work with them to respond, because the customer generally controls that information.

18. California Privacy Notice

This section applies to California residents where the California Consumer Privacy Act, as amended, applies.

California law provides certain privacy rights, including the right to know what personal information a business collects, how it is used and shared, the right to delete personal information, the right to opt out of sale or sharing, and the right to non-discrimination for exercising CCPA rights.

18.1 Categories of Personal Information We May Collect

In the past 12 months, we may have collected the following categories of personal information:

We do not intentionally collect sensitive personal information unless it is necessary to provide the Services, voluntarily provided, or otherwise permitted by law.

18.2 Sources of Personal Information

We may collect personal information from:

• You directly;
• Business customers;
• Candidates;
• Public professional sources;
• Third-party data providers;
• Enrichment providers;
• Communications;
• Recruiting workflows;
• Cookies and analytics tools;
• Integrated services;
• Service providers; and
• Other sources described in this Privacy Policy.

18.3 Purposes for Collection

We collect personal information for the business and commercial purposes described in this Privacy Policy, including providing the Services, sourcing candidates, enriching profiles, conducting outreach, supporting hiring workflows, operating accounts, processing payments, improving the Services, preventing fraud, maintaining security, and complying with law.

18.4 Categories of Personal Information Disclosed

We may disclose the categories of personal information listed above to:

• Business customers;
• Candidates;
• Service providers;
• Data providers;
• Enrichment providers;
• Payment processors;
• Communication vendors;
• Analytics providers;
• Cloud infrastructure providers;
• Security vendors;
• Integrated third-party tools;
• Professional advisors;
• Legal authorities where required; and
• Parties involved in business transfers.

18.5 Sale or Sharing of Personal Information

Cherrypicker does not sell candidate personal information for unrelated advertising, data brokerage, or unrelated commercial purposes.

Candidate information may be provided to hiring companies as part of the recruiting services described in this Privacy Policy. That disclosure is made to facilitate employment opportunities, and it is subject to this Privacy Policy, candidate privacy controls, the applicable recruiting workflow, and applicable law.

Some privacy laws define “sale” or “sharing” broadly, and those definitions can reach activities that are not what most people mean by selling data, including certain advertising, analytics, or data-sharing activities. To the extent any of our activities, including our use of cookies, analytics, or advertising technologies, is considered a “sale” or “sharing” under applicable law, you may have the right to opt out.

You may contact us at privacy@getcherrypicker.com to submit an opt-out request.

18.6 Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law, such as providing the Services, maintaining security, preventing fraud, complying with law, or as otherwise authorized by you.

18.7 Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

19. Other U.S. State Privacy Rights

Residents of certain U.S. states may have privacy rights similar to those described above, including rights to access, correct, delete, obtain a copy of personal information, opt out of targeted advertising, opt out of sale, or appeal a privacy decision.

To exercise these rights, contact us at privacy@getcherrypicker.com.

20. European Economic Area, United Kingdom, and Similar Jurisdictions

If you are located in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction with similar privacy laws, we may process your personal information based on one or more legal bases, including:

• Performance of a contract;
• Legitimate interests;
• Consent;
• Compliance with legal obligations;
• Protection of legal rights; and
• Other lawful bases permitted by applicable law.

Our legitimate interests may include providing and improving the Services, operating recruiting workflows, communicating with users, preventing fraud, maintaining security, and developing our business.

You may have rights to access, correct, delete, object to, restrict, or port your personal information, and to withdraw consent where processing is based on consent.

21. Children’s Privacy

The Services are not intended for children under 18.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it.

If you believe a child has provided personal information to us, contact us at privacy@getcherrypicker.com.

22. Third-Party Links and Services

The Services may contain links to third-party websites, platforms, tools, job postings, customer websites, social media platforms, calendar tools, ATS systems, payment processors, or other third-party services.

We do not control and are not responsible for the privacy practices of third parties. You should review their privacy policies before providing information to them.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we update it, we will revise the “Last Updated” date above. If we make material changes, we may provide notice through the Services, by email, or by other reasonable means.

Your continued use of the Services after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

24. Contact Us

If you have questions about this Privacy Policy, your personal information, or your privacy rights, contact us at:

Cherrypicker Inc.
2248 Broadway #1443
New York, NY 10024
Privacy Requests: privacy@getcherrypicker.com
General Support: support@getcherrypicker.com